Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MOBATW/llSVsBdLtltxdZ84YixhyW0GcXA.roa
File:                     llSVsBdLtltxdZ84YixhyW0GcXA.roa (raw, json)
Hash identifier:          TxLeug+2x9qurrOpwFbk9E211o5hSiYiTPiFqw6gclE=
Subject key identifier:   96:54:95:B0:17:4B:B6:5B:71:75:9F:38:62:2C:61:C9:6D:06:71:70
Certificate issuer:       /CN=A05E66CFA6F8C0DAABFB1AF6FA3218426044F158
Certificate serial:       104F
Authority key identifier: A0:5E:66:CF:A6:F8:C0:DA:AB:FB:1A:F6:FA:32:18:42:60:44:F1:58
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/oF5mz6b4wNqr-xr2-jIYQmBE8Vg.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/MOBATW/llSVsBdLtltxdZ84YixhyW0GcXA.roa
Signing time:             Fri 01 Sep 2023 09:20:57 +0000
ROA not before:           Fri 01 Sep 2023 09:20:57 +0000
ROA not after:            Sat 31 Aug 2024 03:10:53 +0000
asID:                     131634
IP address blocks:        103.127.228.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4175 (0x104f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A05E66CFA6F8C0DAABFB1AF6FA3218426044F158
        Validity
            Not Before: Sep  1 09:20:57 2023 GMT
            Not After : Aug 31 03:10:53 2024 GMT
        Subject: CN=965495B0174BB65B71759F38622C61C96D067170
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:9c:3e:9a:38:0d:d5:16:f0:38:03:1b:73:02:
                    14:ce:0f:d6:e5:6b:f3:6f:6a:62:75:8d:48:f6:82:
                    32:d6:c2:fb:03:2b:41:76:d4:2e:4f:d2:ac:04:b3:
                    c1:a3:b5:95:76:88:fb:d6:2d:a3:b9:e2:3a:fd:cb:
                    05:3d:d0:c2:75:8a:a4:fe:14:29:07:6a:2d:26:8d:
                    1a:d7:f2:12:a4:3a:60:f4:4f:18:11:d9:45:8d:14:
                    6e:e8:69:6a:7b:80:ff:01:41:e6:74:1f:74:5f:f8:
                    65:92:12:04:99:2a:df:a9:4b:30:ca:34:b6:69:09:
                    a0:8e:74:8f:1d:3d:28:22:98:dc:5d:a7:1c:b1:d7:
                    c1:fc:8b:14:19:f0:09:bb:b9:6a:21:73:86:2e:43:
                    94:6d:27:bb:45:75:ad:01:46:64:0f:52:90:36:e2:
                    46:87:d4:52:ce:42:e8:84:5c:56:45:7e:6f:42:a6:
                    18:17:99:13:56:2f:bc:4b:57:ee:46:64:95:55:17:
                    44:81:3c:70:ba:1f:02:82:10:48:0c:2a:c1:4f:b6:
                    0b:58:62:a4:e6:c2:4d:27:9b:21:26:a5:01:0d:d7:
                    c6:96:1a:13:88:85:3f:3e:af:52:a5:7a:44:e3:d0:
                    af:3b:5c:0c:50:c6:77:91:c3:f2:a8:f9:0f:a9:06:
                    08:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:54:95:B0:17:4B:B6:5B:71:75:9F:38:62:2C:61:C9:6D:06:71:70
            X509v3 Authority Key Identifier:
                keyid:A0:5E:66:CF:A6:F8:C0:DA:AB:FB:1A:F6:FA:32:18:42:60:44:F1:58

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MOBATW/oF5mz6b4wNqr-xr2-jIYQmBE8Vg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/oF5mz6b4wNqr-xr2-jIYQmBE8Vg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MOBATW/llSVsBdLtltxdZ84YixhyW0GcXA.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.127.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         65:9a:6e:93:07:74:72:85:a8:78:ef:42:d2:2c:53:d6:5a:a3:
         4e:e7:d1:15:87:5b:f5:6f:31:be:2b:23:ea:66:3e:f6:38:71:
         62:fe:2a:48:2d:c0:0b:f2:32:4c:2a:b9:03:1b:bd:c8:45:5b:
         00:71:d4:84:3a:e8:94:33:36:d2:aa:ec:3b:94:bb:bf:9f:9a:
         f2:2c:8b:e3:0e:68:10:88:c4:38:fc:c9:ff:cd:f0:62:86:39:
         94:af:bf:ed:33:05:87:2f:07:c2:f1:c7:04:0a:1c:ef:e5:51:
         90:0a:6b:6f:a8:9f:89:a7:4b:8b:88:fb:1b:15:45:7d:16:a9:
         88:27:f6:8d:21:3c:37:89:b7:ec:e5:59:a6:37:f5:75:89:31:
         2f:d7:7c:fa:fb:8c:a2:eb:80:19:90:0b:0c:b8:cb:2d:61:41:
         fd:fd:fd:46:26:78:3f:05:9d:58:a9:40:08:5b:65:7c:0b:f8:
         d2:8b:df:3b:9a:ea:8b:ae:1c:46:c9:bf:22:29:46:50:d5:76:
         c3:e9:13:ca:a9:36:ca:39:6a:c2:1b:d1:bb:ad:6c:15:d4:97:
         cb:78:af:22:1f:b6:58:9a:14:68:93:3e:70:fe:42:23:40:6e:
         a4:d2:27:b2:1e:24:b9:c1:76:01:43:f0:22:96:92:ba:5e:9d:
         ea:51:a6:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:14 2024 by rpki-client on console-ams.rpki-client.org